Description
An improper TLS connections handling was found in cURL. By exploiting this vulnerability malicious users can bypass sec. This vulnerability can be exploited remotely via TLS certificate manipulations.
Technical details
Libcurl affected only if mbedTLS or PolarSSL as TLS backend.
Original advisories
Related products
CVE list
- CVE-2016-3739 warning
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!